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Top Stories 

• An explosion at the Williams Northwest Pipeline natural gas processing facility near 
Plymouth, Washington, left 5 workers injured and prompted the voluntary evacuation of 
roughly 400 people from nearby homes and farms while the plant emitted a cloud of black 
smoke March 31. - Associated Press (See item 2) 

• General Motors announced March 31 that it is recalling 1.3 million Chevrolet, Saturn, and 
Pontiac vehicles from model years between 2004 and 2010 due to faulty power steering 
units. - Yahoo Autos (See item 9) 

• A fight between 2 gangs at the Hinds County Detention Center in Raymond, Mississippi, 
left 1 inmate dead and at least 5 others injured March 31. — WAPT 16 Jacksonville (See 
item 27) 

• Researchers at Symantec reported finding 487 groups actively using the njRAT remote 
access trojan (RAT) for malicious uses, with around 24,000 machines infected worldwide. 
- V3.co.uk (See item 33) 
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Energy Sector 



1. April 1, Wisconsin State Journal - (Wisconsin) No injuries reported in Monroe 
ethanol plant fire. Authorities are investigating the cause of a fire and related damage 
after crews responded to the Badger State Ethanol plant in Monroe April 1 due to a 
blaze that occurred while workers were cleaning and doing routine maintenance. 

Source: http://host.madison.com/news/local/crime and courts/no-injuries-reported-in- 
monroe-ethanol-plant-fire/article 6ffflc93-5365-5d44-9b77-ba8f08alec3e.html 

2. March 31, Associated Press - (Washington) Blast rocks Washington gas plant; 5 
workers hurt. An explosion at the Williams Northwest Pipeline natural gas processing 
facility near Plymouth, Washington, left 5 workers injured and prompted the voluntary 
evacuation of roughly 400 people from nearby homes and farms while the plant emitted 
a cloud of black smoke March 31. The explosion sparked a fire and punctured one of 
the facility’s liquefied natural gas storage tanks, allowing a small amount of gas to leak 
to a containment area. 

Source: http://www.miamiherald.com/2014/03/31/4030349/l-hurt-in-natural-gas-blast- 
at.html 

3. March 31, Conway Log Cabin Democrat - (Texas) ExxonMobil to restart Texas 
segment of Pegasus pipeline. The Pipeline and Hazardous Materials Safety 
Administration approved March 31 the restart of a section of ExxonMobil Pipeline 
Company’s Pegasus pipeline that runs through Texas, at reduced pressure, after the 
pipeline was shut down in March 2013 due to an incident where the pipeline ruptured 
and spilled several thousand barrels of heavy crude and industry diluents. 

Source: http://thecabin.net/news/local/2014-03-31/exxonmobil-restart-texas-segment- 
pegasus-pipeline 

4. March 31, Baton Rouge Advocate - (Louisiana) Exxon replacing gas at BR terminal. 
ExxonMobil officials reported March 31 that its gasoline racks at its Baton Rouge 
terminal remained closed while gasoline is pumped out and replaced after two batches 
of bad fuel caused drivers to experience problems with their intake and valve systems. 
The company stated that they identified an abnormal variation after investigating the 
bad fuel. 

Source: http ://theadvocate.com/home/87 8 1 2 1 3 - 1 25/exxon-replacing- gas-at-br 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 



5. April 1, New Orleans Times -Picayune - (Louisiana) Waterford 3 nuclear plant in St. 
Charles Parish faces extra safety oversight. The U.S. Nuclear Regulatory 
Commission (NRC) issued a “white” finding to the operators of the Waterford 3 
nuclear power plant in St. Charles Parish March 3 1 due to the operators’ failure to 
ensure that an exhaust fan which cools backup diesel generators would work in an 
emergency. The finding was of low to moderate safety significance and will bring 
increased NRC oversight of the plant. 

Source: 

http://www.nola.com/business/index.ssf/2014/04/waterford 3 nuclear plant in s.html 

6. April 1, Associated Press - (New Hampshire) Unexpected reactor shutdown at NH 
nuclear plant. The reactor at the Seabrook nuclear power plant in New Hampshire shut 
down unexpectedly April 1 after an electrical problem occurred and affected the plant’s 
reactor coolant pumps. The reactor was in the process of a scheduled shutdown when 
the reactor’s backup safety systems activated and shut it down. 

Source: http://www.sfgate.com/news/article/Unexpected-reactor-shutdown-at-NH- 
nuclear-plant-5366912.php 

7. April 1, Associated Press - (New Mexico) Tests: 4 more workers contaminated at 
NM nuke dump. The U.S. Department of Energy reported March 31 that four more 
workers were found to have been exposed to low levels of radiation during a February 
14 leak at the Waste Isolation Pilot Plant in New Mexico. A total of 21 workers were 
found to have been exposed to low-level radiation at levels below what is deemed 
unsafe. 

Source: http://abcnews.go.com/Health/wireStory/tests-workers-contaminated-nm-nuke- 
dump-23 135722 

[ Return to top ] 

Critical Manufacturing Sector 

8. April 1, U.S. Consumer Product Safety Commission - (International) Dyson recalls 
bladeless portable electric heaters due to fire hazard. Dyson announced a recall of 
around 393,000 Dyson Hot and Dyson Hot+Cool bladeless heaters in the U.S. and 
Canada due to the heaters’ potential to develop an electrical short and overheat, posing 
a fire hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/Dvson-Recalls-Bladeless-Portable- 
Electric-Heaters/ 

9. March 31, Yahoo Autos - (National) GM recalls 1.3 million cars for power steering 
defect already fixed once. General Motors announced March 31 that it is recalling 1.3 
million Chevrolet, Saturn, and Pontiac vehicles from model years between 2004 and 
2010 due to faulty power steering units. The defect was the target of a previous recall 
that included a smaller amount of vehicles equipped with the faulty units. 
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Source: https://autos.yahoo.com/blogs/motoramic/gm-recalls-l-6-million-cars-for- 
power-steering-defect-already-fixed-once-205009529.html 



10. March 31, Los Angeles Times - (National) GM recalls 662,000 Chevy Silverado 
trucks, assorted SUVs, Cruze sedans. General Motors (GM) announced a recall of 
490,200 model year 2014 and 2015 Chevrolet and GMC trucks and SUVs equipped 
with six-speed automatic transmissions due to the vehicles potentially having a 
transmission oil cooler line that is not secured in its fitting and could lead to a leak. GM 
also recalled around 172,000 model year 2013 and 2014 Chevrolet Cruze vehicles 
equipped with 1 .4 liter turbocharged engines to replace a right front axle half shaft that 
can fracture and separate. 

Source: http://www.latimes.com/business/autos/la-fi-hy-chevrolet-silverado-cruze- 
recall-20140331,0,2743266.story 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

1 1 . March 31, Los Angeles Times - (California) Two men accused of trading on inside 
information from their wives. Two California men accused by the U.S. Securities and 
Exchange Commission (SEC) of engaging in insider trading using nonpublic 
information overheard from their spouses agreed to settlements with the SEC to resolve 
the charges. A Los Gatos man agreed to pay $300,000 to settle charges of trading on 
nonpublic information concerning Oracle Corp., and Acme Packet Inc., while a San 
Jose man agreed to pay $280,000 over allegedly shorting Informatica stocks based on 
nonpublic information ahead of an earnings report. 

Source: http://www.latimes.com/business/money/la-fi-mo-two-men-accused-of- 
trading-on-their-wives-inside-information-2014033 1,0,875774. story 

12. March 31, Press of Atlantic City - (New Jersey) Pair arrested at Borgata in $500,000 
credit card-fraud scheme. Two New York men were arrested March 29 in Atlantic 
City and charged with running a credit card fraud scheme that allegedly used fraudulent 
credit cards to purchase prepaid debit cards, with around $500,000 in funds then 
deposited into the suspects’ American Express accounts. 

Source: http://www.pressofatlanticcity.com/news/breaking/pair-arrested-at-borgata-in- 
credit-card-fraud-scheme/article ca78d95a-b8ea-l Ie3-a5cb-001a4bcf887a.html 



13. March 31, Cherry Hill Patch - (New Jersey) Voorhees man pleads guilty to over $1 
million in insurance fraud. A former insurance broker at Aconorate Insurance Agency 
in Hammonton pleaded guilty to his role in the company’s defrauding of over $1 
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million from commercial liability insurance clients by inflating premiums between June 
2004 and July 2006. 

Source: http://cherrvhill.patch.com/ groups/police-and-fire/p/voorhees-man-pleads- 
guilty-to-ovcr- 1 -million-in-insurance-fraud 



T Return to top i 

Transportation Systems Sector 

14. April 1, Associated Press - (Washington) Mudslide hits railroad track north of 
Seattle. A 48-hour safety moratorium was applied to Amtrak commuter trains between 
Seattle and Everett starting April 1 due to a mudslide that impacted railroad tracks 
south of Mukilteo. The tracks were cleared that day so that freight train service could 
resume. 

Source: http://www.kptv.com/story/25128276/mudslide-hits-railroad-track-north-of- 
seattle 

15. March 31, MTN News - (Montana) Drivers face long detours after 1-90 landslide. 
Part of Interstate 90 westbound between mile markers seven and eight near Lookout 
Pass remained closed March 31 due to a landslide March 30 that prompted the Montana 
Highway Patrol to create several detours that added an extra 60 to 70 miles for drivers. 
Source: http://www.ktvq.com/news/drivers-face-long-detours-after-i-90-landslide/ 

16. March 31, Hays Post - (Kansas) Blowing dust forces closure of NW Kansas 
highways. A portion of the Kansas 25 highway between U.S. 36 and the Nebraska 
border was shut down for several hours March 31 due to visibility issues caused by 
blowing dust. Part of the Kansas 27 highway was also closed between Goodland and 
Wheeler due to the blowing dust. 

Source: http://www.havspost.com/2014/03/31/blowing-dust-forces-closure-of-nw- 
kansas-highway/ 

17. March 31, Houston Chronicle - (Texas) Fatal wreck closes a part of the Southwest 
Freeway. All southbound lanes of the Southwest Freeway at Chimney Rock were 
closed for about 8 hours March 31 and one person was confirmed killed after a pickup 
truck got lodged under a semi-truck and caused a fire. 

Source : http://www.chron.com/news/houston-traffic/article/Fatal-wreck-closes-all- 
southbound-lanes-of-5364397.php 

[ Return to top ] 

Food and Agriculture Sector 

18. March 31, WQAD 8 Moline - (Utah) 150,000 hens die in fire at Iowa egg farm. A fire 
broke out March 30 at the Centrum Valley Farms’ egg farm in Galt, killing 150,000 
hens housed in two bams. The cause of the fire is under investigation. 

Source: http://wqad.com/2014/03/31/150000-hens-die-in-fire-at-iowa-egg-faiTn/ 
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19. March 31, U.S. Food and Drug Administration - (Texas) Lao Thai Nam Corp. 
voluntarily recalls Number One Sompa Salted Fish because of possible health risk. 
The U.S. Food and Drug Administration announced that Lao Thai Nam Corp., 
voluntarily recalled 7-ounce packages of its Number One Sompa Salted Fish due to 
possible Clostridium botulinum contamination after an inspection found the process for 
the fish being manufactured was not correctly validated. 

Source: http://www.fda.gov/Safety/Recalls/ucm391226.htm 

20. March 28, U.S. Food and Drug Administration - (National) Vita Food Products 
issues voluntary recall of ELF Herring Fillets in Wine Sauce containing 
undeclared milk. Vita Food Products, Inc., voluntarily recalled 2,280 individual 12- 
ounce packages of its ELF Herring Fillets in Wine Sauce due to mislabeling and 
undeclared milk. 

Source: http://www.fda.gov/Safety/Recalls/ucm391106.htm 



T Return to top i 

Water and Wastewater Systems Sector 

21. March 31, KRCR 7 Redding - (California) Homes lose water after car hits fire 
hydrant. About 30,000 gallons of water were lost and several homes in east Redding 
had their water shut off after a car collided with a fire hydrant and broke a water main 
March 31 when the driver lost control of the vehicle. 

Source: http://www.krcrtv.com/news/local/homes-lose-water-after-car-hits-fire- 
hvdrant/25260906 
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Healthcare and Public Health Sector 

22. March 31, Tacoma News Tribune - (National) Phishing emails net medical records, 
Social Security numbers at Tacoma’s Franciscan Health System. Franciscan Health 
System notified more than 12,000 patients nationwide that their personal information 
may have been accessed after Franciscan Medical Group employees were targeted in a 
phishing scheme in January. Staff received emails which appeared to be sent by the 
health system’s parent company, Catholic Health Initiatives, and entered their user 
names and passwords. 

Source: http://www.thenewstribune.com/2014/03/31/3126217/phishing-e-mails-net- 
medical-records.html 



23. March 31, Tallahassee Democrat - (Florida) Tallahassee woman charged with filing 
more than $23,000 in fraudulent medical claims. Police charged a Tallahassee 
Orthopedic Clinic employee after she received more than $23,000 in fake health 
insurance reimbursements when she falsified 18 claims for doctor visits and services 
that never occurred. The suspect downloaded reimbursement forms from the AFLAC 
insurance company’s Web site and falsely filled them out using medical information 
she accessed through a work computer. 
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Source: http://www.tallahassee.com/article/20140331/NEWS/140331Q26/ 



Government Facilities Sector 

24. March 31, Suffolk Times - (New York) Mercy High School reopens following 
electrical fire. Classes resumed at Bishop-McGann Mercy High School in Riverhead 
April 1 after crews cleaned and repaired damage from a March 30 electrical fire that 
caused smoke and water damage and forced the school to close March 31. 

Source: http://suffolktimes.timesreview.com/2014/03/47191/photos-video-electrical- 
fire-sparks-at-mercy-high-school/ 

25. March 31, Murfreesboro Daily News Journal - (Tennessee) Judicial building bomb 
threat a hoax. The Rutherford County Judicial Building in Murfreesboro was 
evacuated for 2 hours March 3 1 after a bomb threat was called into the county court 
clerk’s office. Police cleared the scene after nothing suspicious was found. 

Source: http://www.dnj .com/article/20 1 4033 1/NEW S/3033 1 0026 

26. March 30, Pittsburgh Post-Gazette - (Pennsylvania) Pitt- Johnstown services reopen 
after several falls ill. The University of Pittsburgh at Johnstown resumed normal 
operations March 30 after several students were reportedly sickened March 28 with 
what was suspected to be norovirus. The university suspended all campus social events 
and closed its dining facilities while disinfecting all academic buildings. 

Source: http://www.post-gazette.com/local/region/2014/03/30/Universitv-of- 
Pittsburgh-at-Johnstown-to-resume-normal-operations/stories/201403300253 

For another story, see item 40 
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Emergency Services Sector 

27. April 1, WAPT 16 Jackson - (Mississippi) Inmate stabbed to death in jail gang fight; 
Body found in cell. A fight between 2 gangs at the Hinds County Detention Center in 
Raymond left 1 inmate dead and at least 5 others injured March 31. The jail resumed 
accepting new inmates April 1. 

Source: http://www.wapt.com/news/disturbance-shuts-down-hinds-county- 
iail/25257500 

28. April 1, WMBF 32 Myrtle Beach - (South Carolina; North Carolina) Suspect steals 
police car; leads high speed chase into NC. Police took a suspect into custody after 
he walked away from Waccamaw Community Hospital and stole a Georgetown County 
police car when officers found him walking along Highway 17. The suspect led officers 
on a chase before he was eventually caught on Highway 904 near Tabor City, North 
Carolina, and was extradited back to South Carolina. 

Source: http://www.wmbfnews.com/story/25 1111 86/suspect-steals-police-car-leads- 
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high-speed-chase-into-nc 



29. March 31, Arizona Daily Star - (Arizona) Inmate escapes from minimum security 
prison in Tucson. Authorities are searching for an inmate who escaped from the 
Federal Correctional Complex Satellite Camp in Tucson March 30. 

Source: http://azstarnet.com/news/local/inmate-escapes-from-minimum-security- 
prison-in-tucson/article 0 1 a5d0f4-b9 13-11 e3-8d lc-00 19bb2963f4.html 

30. March 31, Albany Times Union - (New York) Wet cable causes 911 problems. An 
underground Verizon phone cable serving the sheriffs department, its communications 
center, and other offices became wet and malfunctioned March 30, causing 5 out of 10 
emergency phone lines for Saratoga County to stop working. Crews worked March 31 
to repair the line while 9-1-1 calls were rerouted. 

Source: http://www.timesunion.com/local/article/Wet-cable-causes-911-problems- 
5362901 .pirn 



[Return to top ] 

Information Technology Sector 

31. April 1, Softpedia - (International) Experts unhappy with Oracle’s Java Cloud 
patching process, vulnerability details published. Researchers at Security 
Explorations published details of 30 vulnerabilities in Oracle Java Cloud Service, about 
half of which can be used to break the Java security sandbox. The vulnerabilities were 
previously reported to Oracle in January. 

Source: http://news.softpedia.com/news/Experts-Unhappv-with-Oracle-s-Java-Cloud- 
Patching-Process-Vulnerability-Details-Published-435125.shtml 

32. April 1, IDG News Service - (International) CryptoDefense ransomware leaves 
decryption key accessible. Symantec researchers analyzed the CryptoDefense 
encryption ransomware and found that the decryption key needed to undo the 
malware’s file encryption is also left on the victim’s computer, potentially allowing 
victims to decrypt the files held for ransom themselves. 

Source: 

http://www.computerwoiid.eom/s/article/9247348/CryptoDefense ransomware leaves 
decryption key accessible 

33. April 1, V3. co. uk- (International) Middle Eastern hackers use remote access trojan 
to infect 24,000 machines worldwide. Researchers at Symantec reported finding 487 
groups actively using the njRAT remote access trojan (RAT) for malicious uses, with 
around 24,000 machines infected worldwide. Symantec reported that most attacks using 
njRAT originate in the Middle East and that the majority of the RAT’s command and 
control servers are located in the Middle East and North Africa. 

Source: http://www.v3.co.uk/v3-uk/news/2337382/middle-eastern-hackers-use-remote- 
access-troian-to-infect-24-000-machines-worldwide 

34. April 1, Softpedia - (International) Email marketing service Mad Mimi hit by DDoS 



-8 - 



attacks, blackmailed. Email marketing service Mad Mimi reported that it was the 
target of a distributed denial of service (DDoS) attack March 30, which caused 
intermittent issues. An attack claiming to be behind the DDoS attack demanded a 
ransom to stop the attack but was refused. 

Source: http://news.softpedia.com/news/Email-Marketing-Service-Mad-Mimi- 
Hit-by-DDOS-Attacks-Blackmailed-435152.shtml 



35. March 31, SC Magazine - (International) Smartphones at risk of malicious code 
injection through HTML5-based apps. Researchers at Syracuse University published 
a paper detailing how HTML5 -based smartphone apps could allow for devices to be 
targeted with a new Cross-Device Scripting (XDS) attack that could inject malicious 
code via WiFi scanning, SMS messaging, or other means. 

Source: http://www.scmagazine.com/smartphones-at-risk-of-malicious-code-iniection- 
through-html5-based-apps/article/340513/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

36. April 1, Washington Post - (Maryland) Fire spreads through Lanham apartment 
building; 30 residents displaced. A fire broke out April 1 at an apartment building in 
Lanham, Maryland, damaging 15 units and leaving about 45 residents displaced. 
Authorities believe the fire may have started inside a utility closet and continued to 
investigate. 

Source: http://www.washingtonpost.com/local/crime/fire-spreads-through-lanham- 
apartment-building-30-residents-displaced/2014/04/01/b98ce8f6-b99f-lle3-899e- 
bb708e3539dd story.html 

37. April 1, WNYW 5 New York City - (New York) Popular event venue evacuated on 
Lower East Side. About 500 people were evacuated from the Angel Orensanz 
Foundation Center for the Arts in New York City March 31 after cracks were 
discovered on the first and second floors and the balcony floor began to shake and sag. 
The venue will remain closed indefinitely while repairs are made. 

Source: http://www.mvfoxnv.com/story/25126383/popular-event-venue-evacuated-on- 
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lower-east-side 



38. March 31, News 12 Brooklyn - (New York) Swaying steeple at Christ Fellowship 
Baptist Church in Bed-Stuy forces evacuation. New York City’s Department of 
Buildings lifted a full vacate order that was issued due to the fear of falling debris after 
reports that people saw and heard the steeple atop the Christ Fellowship Baptist Church 
in Bedford-Stuyvesant moving during strong gusts of wind March 31. 

Source: http://brooklvn.newsl2.com/news/swaving-steeple-at-christ-fellowship-baptist- 
church-in-bed-stuy-forces-evacuation- 1 .75620 1 0 

39. March 31, WBOC 16 Salisbury - (Delaware; Maryland) Salisbury Police: New leads 
in bomb scare at Centre at Salisbury mall. The FBI is investigating after a man 
called 9-1-1 from Delmar, Delaware, and reported a bomb threat at the Centre at 
Salisbury mall in Salisbury, Maryland, March 28. The mall was evacuated and closed, 
and reopened March 29 after police searched and cleared the scene. 

Source: http://www.wboc.com/storv/25109784/salisburv-police-new-leads-in-bomb- 
scare-at-salisbury-mall 

40. March 31, Durham Herald-Sun - (North Carolina) Clothes, computer in bag prompt 
Durham bomb scare. Police responded to the N.C. Mutual Life Building March 31 
after a package was found under the front steps of the building, prompting about 430 
workers from the life insurance company and the federal Veterans Administration to 
evacuate for about 3 hours. No explosives were found and the scene was cleared. 
Source: http://www.heraldsun.com/news/localnews/x2025292907/Clothes-computer- 
in-bag-prompt-Durham-bomb-scare 

41. March 28, Long Island Newsday - (New York) Nordstrom's at Roosevelt Field 
reopens after bomb threat. A phoned bomb threat forced a Nordstrom’s department 
store at the Roosevelt Field mall in Garden City to evacuate for over 2 hours March 28. 
Police searched and cleared the scene after nothing suspicious was found. 

Source: http://www.newsday.com/long-island/nassau/nordstrom-s-at-roosevelt-field- 
reopens-after-bomb-threat- 1.7536415 
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Dams Sector 



Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 11 - 




